v0.2.4

Container image

docker pull ghcr.io/contextforge-org/contextforge-web-ui:0.2.4

Signed with Cosign (keyless OIDC) — verify with:

cosign verify ghcr.io/contextforge-org/contextforge-web-ui@sha256:60587b6dd81be22c8d7ce76b1595b8b67c209674f67b9fedf387d8aa1d6ada6f \
  --certificate-identity-regexp 'https://github.com/contextforge-org/contextforge-web-ui/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Built for linux/amd64 and linux/arm64. SBOM (SPDX) attached below.
See DOCKER.md for compose/Helm usage.

What's Changed

• fix(teams): invite addresses with no account instead of failing by @marekdano in #178
• fix(catalog): move OAuth registration to an inline form by @vishu-bh in #177
• refactor(servers): use shared Field in TestConnectionPanel by @CloudCorpRecords in #180
• refactor(auth): use shared Field in Login, ForgotPassword and PasswordChangeRequired by @CloudCorpRecords in #191
• test(e2e): self-contained Keycloak for e2e stack by @gcgoncalves in #187
• chore(deps): apply npm audit fix and fix ForgotPassword rate-limit test by @marekdano in #193
• docs: add Keycloak SSO setup guide by @gcgoncalves in #188
• fix(gateways): hide source selector for single-source virtual servers by @marekdano in #192
• chore: refresh openapi.json to API v1.1.0+42a06c by @marekdano in #196
• chore: bump version to 0.2.4 by @marekdano in #197

Full Changelog: v0.2.3...v0.2.4

v0.2.3

Container image

docker pull ghcr.io/contextforge-org/contextforge-web-ui:0.2.3

Signed with Cosign (keyless OIDC) — verify with:

cosign verify ghcr.io/contextforge-org/contextforge-web-ui@sha256:10d122b3b44e65a8c7f23d8d6a0817317f7a30aedd52d1c54979c7e493a9cb29 \
  --certificate-identity-regexp 'https://github.com/contextforge-org/contextforge-web-ui/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Built for linux/amd64 and linux/arm64. SBOM (SPDX) attached below.
See DOCKER.md for compose/Helm usage.

What's Changed

• feat: Public SSO status probe by @gcgoncalves in #142
• feat: OIDC discovery client by @gcgoncalves in #143
• feat: Login page SSO button by @gcgoncalves in #144
• feat: Truncate URLs in center by @gcgoncalves in #146
• feat: add read-only SSO settings tab by @gcgoncalves in #147
• fix: MCP Server actions RBAC by @gcgoncalves in #149
• [UI-REWRITE] Add a shared MCP server status indicator by @a-effort in #130
• feat: BFF SSO login endpoints by @gcgoncalves in #148
• feat: SSO token exchange and resolution libs by @gcgoncalves in #154
• feat: Delay cancel button for live tool invokes by @byrnec30 in #155
• fix: keep sidebar team switcher in sync with team changes by @marekdano in #157
• feat: SSO callback route and session wiring by @gcgoncalves in #156
• feat: SSO token refresh (Keycloak refresh_token) by @gcgoncalves in #158
• feat: show catalog add failure error on the card by @a-effort in #153
• refactor: extract shared Callout for inline warnings by @marekdano in #161
• feat(tools): redesign Tools drawer try-it experience by @marekdano in #151
• fix: remove textarea min-height overrides so fields auto-size and shrink by @marekdano in #162
• feat(tls): add cert generation script and cert_init service by @marekdano in #164
• feat: add nginx_tls service and TLS compose scripts by @marekdano in #165
• feat: complete MCP OAuth form quick wins by @vishu-bh in #167
• refactor: make status indicator presentation reusable by @a-effort in #160
• fix(ui): add caller-scoped OAuth status handling by @vishu-bh in #150
• 5536 feature view accept pending invitations by @a-effort in #122
• fix(tools): remove duplicate preview arguments by @0717lee in #166
• feat: virtual server add source step by @a-effort in #131
• feat: wire SSO token refresh into sessionAuth by @gcgoncalves in #163
• tests: SSO flow Playwright tests by @gcgoncalves in #168
• feat(tls): trust the self-signed cert for BFF outbound calls by @marekdano in #170
• feat(tls): add TLS smoke test script by @marekdano in #169
• feat: add TLS variant of the e2e stack by @marekdano in #172
• feat: add TLS smoke workflow by @marekdano in #173
• fix(e2e): resolve real-API-mode spec failures by @marekdano in #175
• chore(deps): update dependencies, catch specific high vuln deps by @brian-hussey in #179
• fix: truncate resource preview chip picker and add search by @marekdano in #176
• feat(gateways): remove components from a virtual server's details panel by @gcgoncalves in #182
• feat(tools): let REST tools declare read-only/destructive behavior by @gcgoncalves in #183
• feat(gateways): allow adding REST tools to virtual servers by @gcgoncalves in #184
• fix(gateways): remove virtual server tool try-it feature flag by @marekdano in #185
• chore: refresh openapi.json to API v1.0.11+9b2156 by @gcgoncalves in #186
• refactor(prompts,resources): use shared Field in args forms by @CloudCorpRecords in #181
• Bump version by @gcgoncalves in #189

New Contributors

• @byrnec30 made their first contribution in #155
• @CloudCorpRecords made their first contribution in #181

Full Changelog: v0.2.2...v0.2.3

v0.2.2

Container image

docker pull ghcr.io/contextforge-org/contextforge-web-ui:0.2.2

Signed with Cosign (keyless OIDC) — verify with:

cosign verify ghcr.io/contextforge-org/contextforge-web-ui@sha256:8478c7242e50d3e415635036617ab373e0e1ad9ca7788b3d0d0eb6cb8bb43384 \
  --certificate-identity-regexp 'https://github.com/contextforge-org/contextforge-web-ui/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Built for linux/amd64 and linux/arm64. SBOM (SPDX) attached below.
See DOCKER.md for compose/Helm usage.

What's Changed

• fix: surface failed component list loads in expose components form by @0717lee in #106
• Add a language selector to the profile menu by @a-effort in #103
• feat: add home system status sparklines by @a-effort in #97
• fix: proxy /oauth/* through the BFF and stop guessing redirect_uri by @marekdano in #101
• feat: Agents list by @gcgoncalves in #109
• i18n: Fix lingo by @gcgoncalves in #114
• Add detect-secrets scanning by @brian-hussey in #115
• chore: Annotate all secrets by @gcgoncalves in #117
• fix: Form primitives spacing by @gcgoncalves in #110
• Remove temporary tool preview feature flag by @gandhipratik203 in #88
• Add mend config file for internal scanning purposes by @brian-hussey in #119
• fix: only show DCR hint for authorization_code grant type by @marekdano in #116
• fix: use gateway-supplied MCP endpoint URL instead of window.location.origin by @marekdano in #107
• feat: migrate mcp-server and virtual-server endpoints to v1 API paths by @marekdano in #98
• fix: remove inaccurate required markers from OAuth Issuer URL and Token URL by @marekdano in #121
• feat: Add MCP refresh button by @gcgoncalves in #118
• feat: surface errors in MCP server refresh toast by @gcgoncalves in #124
• feat: proxy the BFF to Vite for single-origin HMR in one terminal window by @marekdano in #99
• docs: add release process runbook and openapi refresh automation by @marekdano in #112
• fix: group catalog auth-type filter by display group, not raw value by @marekdano in #125
• fix: all npm vulnerabilities by @marekdano in #127
• chore: Add docs directory for general documentation by @gcgoncalves in #129
• feat: Apply Field primitive to Server Form by @gcgoncalves in #128
• fix: Change default Field height h-9 => h10 by @gcgoncalves in #135
• chore: add THIRD-PARTY-NOTICES for SIL OFL and CC BY 4.0 dependencies by @brian-hussey in #138
• fix: clip oversized catalog server logos with rounded corners in the server catalog page by @marekdano in #132
• feat: Apply Field component to Settings forms by @gcgoncalves in #137
• feat: Apply Field component to MCP Core auth forms by @gcgoncalves in #134
• feat: Apply Field component to MCP Assets forms by @gcgoncalves in #136
• feat: Apply Field component to MCP Core features by @gcgoncalves in #133
• [UI-REWRITE] catalog icon tile & logo fallback adjustments by @a-effort in #139
• fix: label team public visibility as Internal in create/edit form and teams table by @marekdano in #140
• [feat]: Config Keycloak OIDC client settings by @gcgoncalves in #141
• [UI-REWRITE]: Add virtual server component tool testing by @gandhipratik203 in #90
• feat(catalog): add OAuth server setup flow by @vishu-bh in #113
• chore: bump openapi.json and package version by @gcgoncalves in #145

New Contributors

• @0717lee made their first contribution in #106
• @brian-hussey made their first contribution in #115

Full Changelog: v0.2.1...v0.2.2

v0.2.1

Container image

docker pull ghcr.io/contextforge-org/contextforge-web-ui:0.2.1

Signed with Cosign (keyless OIDC) — verify with:

cosign verify ghcr.io/contextforge-org/contextforge-web-ui@sha256:e2063ab012e7fe78815c5f840d517e1cc1fd484ed25c7b8e37cd78210cc3ab98 \
  --certificate-identity-regexp 'https://github.com/contextforge-org/contextforge-web-ui/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Built for linux/amd64 and linux/arm64. SBOM (SPDX) attached below.
See DOCKER.md for compose/Helm usage.

What's Changed

• fix: improve notifications styles by @marekdano in #95
• feat: add Quick Add dialog to Connect MCP Server form for open MCP servers only. by @marekdano in #87
• fix: pass aggregatedCounts only when all component queries succeed by @marekdano in #96
• Bump openapi version by @gcgoncalves in #108

Full Changelog: v0.2.0...v0.2.1

v0.2.0

Container image

docker pull ghcr.io/contextforge-org/contextforge-web-ui:0.2.0

Signed with Cosign (keyless OIDC) — verify with:

cosign verify ghcr.io/contextforge-org/contextforge-web-ui@sha256:0667da6ab637b92b313f745704aa14b794ce6989032d071283b8f4400f73039c \
  --certificate-identity-regexp 'https://github.com/contextforge-org/contextforge-web-ui/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Built for linux/amd64 and linux/arm64. SBOM (SPDX) attached below.
See DOCKER.md for compose/Helm usage.

What's Changed

• [UI-REWRITE] Add tool preview tab by @gandhipratik203 in #53
• fix: correct the published image tag in release notes and drop duplicate latest by @a-effort in #56
• fix(ui): row color adjustment for component tables by @a-effort in #58
• docs: clarify which dev server actually serves the app by @a-effort in #57
• feat: add a preview experience to the resource details panel by @marekdano in #51
• Fix public password reset proxy by @vishu-bh in #54
• fix: consistent Copied feedback on every copy button by @marekdano in #61
• fix: MCP server OAuth form quick wins (read-only redirect URI, drop password grant) UI part by @marekdano in #15
• feat: add MCP handshake test mode to Test Connection by @Altamimi-Dev in #16
• fix: remove self-recursive husky hook stubs by @Altamimi-Dev in #68
• fix: gate the recent-activity fetch on audit:read by @Altamimi-Dev in #69
• docs: document the permission-gating contract on hasPermission by @Altamimi-Dev in #71
• [UI-REWRITE] Render tool preview results by @gandhipratik203 in #55
• fix: match sanitized query errors in isPermissionDenied and adopt it in McpHealthCard by @Altamimi-Dev in #70
• fix: make component drawer table rows inert, move selection to the name control by @marekdano in #66
• fix: keep the /api prefix when proxying /api/logs/* by @a-effort in #74
• fix(build): break the vendor <-> vendor-react chunk cycle by @a-effort in #45
• fix: show full value on truncated text (hover tooltips) by @marekdano in #78
• fix: show copy button confirmation on click only by @marekdano in #77
• Team selector ux fix by @a-effort in #31
• chore: Add build step to CI by @gcgoncalves in #80
• fix: reserve the scrollbar gutter in the details drawers by @a-effort in #83
• feature: Performance improvements by @gcgoncalves in #11
• Add gated tool live invocation and snippets by @gandhipratik203 in #79
• Component swap to remove double tabs by @a-effort in #82
• 6215: Add (real) E2E tests by @gcgoncalves in #84
• feat: add catalog gateway actions by @vishu-bh in #81
• feat: add Test connection tab to virtual server details drawer by @marekdano in #76
• fix: Standardize status icons and colors app-wide by @marekdano in #67
• feat: add API-key catalog registration flow by @vishu-bh in #89
• Recent Activity feed by @a-effort in #75
• Release v0.2.0 by @gcgoncalves in #102

New Contributors

• @Altamimi-Dev made their first contribution in #16

Full Changelog: v0.1.0...v0.2.0

v0.1.0

Container image

docker pull ghcr.io/contextforge-org/contextforge-web-ui:0.1.0

Signed with Cosign (keyless OIDC) — verify with:

cosign verify ghcr.io/contextforge-org/contextforge-web-ui@sha256:fef06089de618c3f69c647c91072b0af22b15e6152fb3b7ea8f3b578212bdf0a \
  --certificate-identity-regexp 'https://github.com/contextforge-org/contextforge-web-ui/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Built for linux/amd64 and linux/arm64. SBOM (SPDX) attached below.
See DOCKER.md for compose/Helm usage.

Features

• MCP Servers
  • Tools
  • Prompts
  • Resources
  • MCP Server catalog
• Virtual servers
• Plugins
• Users
  • Teams
  • API Tokens
• Overview Dashboard
• Light/Dark themes
• Internationalisation (English/Spanish/Portuguese)
• Global search

Commit history

• chore: Fixate API version by @gcgoncalves in #3
• fix: 12 npm vulnerabilities by @marekdano in #6
• fix: duplicate identifier errors in generated API types by @marekdano in #5
• chore: Add github actions by @gcgoncalves in #4
• feat: API tokens management page with all functions by @marekdano in #8
• feature(ui): BFF by @gcgoncalves in #1
• feat(ui-rewrite): (De)Activate prompts button by @gcgoncalves in #12
• feat: add accessible MCP server catalog by @vishu-bh in #7
• feat: enable virtual server state actions by @vishu-bh in #9
• feat: rename Public visibility to Internal and add level tooltips by @marekdano in #13
• Header search improvements by @a-effort in #19
• fix: standardize table header styles on TableHead token defaults by @marekdano in #21
• feat: move catalog filters into a dialog by @gandhipratik203 in #14
• feat: add plugin catalog page by @marekdano in #23
• Plugins page small adjustments & layout shift fix by @a-effort in #24
• fix: hide unfinished nav items (Playground, Agents, REST API, gRPC) from sidebar by @marekdano in #25
• feat: add e2e test for Server catalog and Plugins pages by @marekdano in #29
• feat: UI/BFF docker + compose stack with Redis by @gcgoncalves in #30
• feat: Add app and API versions by @gcgoncalves in #32
• feat: implement accessible password reset flow by @vishu-bh in #22
• feat: surface catalog entries in header search by @gandhipratik203 in #26
• bug: Fix logout backend response and docker build by @gcgoncalves in #33
• Adjust MCP server table light theme & localization additions by @a-effort in #34
• feat(ui): gate create cards behind RBAC create permissions by @marekdano in #37
• Add server catalog card actions and registration flow by @vishu-bh in #28
• chore: Bump API to v1.0.8 by @gcgoncalves in #41
• fix(auth): clear stale session/CSRF state on failed login by @marekdano in #38
• fix: Global search visuals by @gcgoncalves in #43
• Plugin filters adjustments by @a-effort in #39
• feat: Password change required page by @gcgoncalves in #42
• Proposed README edits by @a-effort in #18
• Adjust tools, resources & prompts light theme by @a-effort in #47
• chore: Pre-commit hooks by @gcgoncalves in #2
• Mcpcatalog filters adjustments by @a-effort in #40
• chore: format root markdown with Prettier by @a-effort in #50
• feat: Add release workflow by @gcgoncalves in #49
• fix: Docker Image build on remote server by @gcgoncalves in #52

New Contributors

• @gcgoncalves made their first contribution in #3
• @marekdano made their first contribution in #6
• @vishu-bh made their first contribution in #7
• @gandhipratik203 made their first contribution in #14

Full Changelog: https://github.com/contextforge-org/contextforge-web-ui/commits/v0.1.0